<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta http-equiv="content-security-policy" content="">
    <!--<meta name="viewport" content="">-->
    <title>CSP-learn</title>
</head>
<body>
<h3>CSP</h3>
<form action="https://baidu.com">
    <button type="submit">click me</button>
</form>
<script>
    console.log('inline js');
</script>
</body>
</html>